mirror of
https://github.com/smogon/pokemon-showdown-client.git
synced 2026-09-13 14:29:25 -05:00
Properly sanitise displayed userid
This commit is contained in:
@@ -46,7 +46,7 @@ function getGroup($username) {
|
||||
|
||||
function getLoginInformation() {
|
||||
global $user;
|
||||
return '<p>You are logged in as ' . $user['group'] . $user['userid'] . '.</p>';
|
||||
return '<p>You are logged in as ' . $user['group'] . htmlentities($user['userid']) . '.</p>';
|
||||
}
|
||||
|
||||
define('AUTH_NOASSERTION', 0);
|
||||
|
||||
Reference in New Issue
Block a user